# CVEs published 2008-03-18

39 CVEs were published on March 18, 2008: 0 critical, 0 high. Days are UTC.

- [CVE-2008-0047](https://cve.now/CVE-2008-0047.md): Heap-based buffer overflow in the cgiCompileSearch function in CUPS 1.3.5, and other versions including the version bundled with Apple Mac O (no CVSS)
- [CVE-2008-0052](https://cve.now/CVE-2008-0052.md): CoreServices in Apple Mac OS X 10.4.11 treats .ief as a safe file type, which allows remote attackers to force Safari users into opening an (no CVSS)
- [CVE-2008-0053](https://cve.now/CVE-2008-0053.md): Multiple buffer overflows in the HP-GL/2-to-PostScript filter in CUPS before 1.3.6 might allow remote attackers to execute arbitrary code vi (no CVSS)
- [CVE-2008-0054](https://cve.now/CVE-2008-0054.md): Foundation in Apple Mac OS X 10.4.11 might allow context-dependent attackers to execute arbitrary code via a malformed selector name to the (no CVSS)
- [CVE-2008-0055](https://cve.now/CVE-2008-0055.md): Foundation in Apple Mac OS X 10.4.11 creates world-writable directories while NSFileManager copies files recursively and only modifies the p (no CVSS)
- [CVE-2008-0056](https://cve.now/CVE-2008-0056.md): Stack-based buffer overflow in Foundation in Apple Mac OS X 10.4.11 allows context-dependent attackers to execute arbitrary code via a "long (no CVSS)
- [CVE-2008-0058](https://cve.now/CVE-2008-0058.md): Race condition in the NSURLConnection cache management functionality in Foundation for Apple Mac OS X 10.4.11 allows remote attackers to exe (no CVSS)
- [CVE-2008-0059](https://cve.now/CVE-2008-0059.md): Race condition in NSXML in Foundation for Apple Mac OS X 10.4.11 allows context-dependent attackers to execute arbitrary code via a crafted (no CVSS)
- [CVE-2008-0060](https://cve.now/CVE-2008-0060.md): Help Viewer in Apple Mac OS X 10.4.11 and 10.5.2 allows remote attackers to execute arbitrary Applescript via a help:topic\_list URL that inj (no CVSS)
- [CVE-2008-0987](https://cve.now/CVE-2008-0987.md): Stack-based buffer overflow in Image Raw in Apple Mac OS X 10.5.2, and Digital Camera RAW Compatibility before Update 2.0 for Aperture 2 and (no CVSS)
- [CVE-2008-0988](https://cve.now/CVE-2008-0988.md): Off-by-one error in the Libsystem strnstr API in libc on Apple Mac OS X 10.4.11 allows context-dependent attackers to cause a denial of serv (no CVSS)
- [CVE-2008-0989](https://cve.now/CVE-2008-0989.md): Format string vulnerability in mDNSResponderHelper in Apple Mac OS X 10.5.2 allows local users to execute arbitrary code via format string s (no CVSS)
- [CVE-2008-0990](https://cve.now/CVE-2008-0990.md): notifyd in Apple Mac OS X 10.4.11 does not verify that Mach port death notifications have originated from the kernel, which allows local use (no CVSS)
- [CVE-2008-0992](https://cve.now/CVE-2008-0992.md): Array index error in pax in Apple Mac OS X 10.5.2 allows context-dependent attackers to execute arbitrary code via an archive with a crafted (no CVSS)
- [CVE-2008-0993](https://cve.now/CVE-2008-0993.md): Podcast Capture in Podcast Producer for Apple Mac OS X 10.5.2 invokes a subtask with passwords in command line arguments, which allows local (no CVSS)
- [CVE-2008-0994](https://cve.now/CVE-2008-0994.md): Preview in Apple Mac OS X 10.5.2 uses 40-bit RC4 when saving a PDF file with encryption, which makes it easier for attackers to decrypt the (no CVSS)
- [CVE-2008-0995](https://cve.now/CVE-2008-0995.md): The Printing component in Apple Mac OS X 10.5.2 uses 40-bit RC4 when printing to an encrypted PDF file, which makes it easier for attackers (no CVSS)
- [CVE-2008-0996](https://cve.now/CVE-2008-0996.md): The Printing component in Apple Mac OS X 10.5.2 might save authentication credentials to disk when starting a job on an authenticated print (no CVSS)
- [CVE-2008-0998](https://cve.now/CVE-2008-0998.md): Unspecified vulnerability in NetCfgTool in the System Configuration component in Apple Mac OS X 10.4.11 and 10.5.2 allows local users to byp (no CVSS)
- [CVE-2008-0999](https://cve.now/CVE-2008-0999.md): Apple Mac OS X 10.5.2 allows user-assisted attackers to cause a denial of service (crash) via a crafted Universal Disc Format (UDF) disk ima (no CVSS)
- [CVE-2008-1000](https://cve.now/CVE-2008-1000.md): Directory traversal vulnerability in ContentServer.py in the Wiki Server in Apple Mac OS X 10.5.2 (aka Leopard) allows remote authenticated (no CVSS)
- [CVE-2008-0044](https://cve.now/CVE-2008-0044.md): Multiple buffer overflows in AFP Client in Apple Mac OS X 10.4.11 and 10.5.2 allow remote attackers to cause a denial of service (applicatio (no CVSS)
- [CVE-2008-0045](https://cve.now/CVE-2008-0045.md): Unspecified vulnerability in AFP Server in Apple Mac OS X 10.4.11 allows remote attackers to bypass cross-realm authentication via unknown m (no CVSS)
- [CVE-2008-0046](https://cve.now/CVE-2008-0046.md): The Application Firewall in Apple Mac OS X 10.5.2 has an incorrect German translation for the "Set access for specific services and applicat (no CVSS)
- [CVE-2008-0048](https://cve.now/CVE-2008-0048.md): Stack-based buffer overflow in AppKit in Apple Mac OS X 10.4.11 allows context-dependent attackers to execute arbitrary code via the a long (no CVSS)
- [CVE-2008-0049](https://cve.now/CVE-2008-0049.md): AppKit in Apple Mac OS X 10.4.11 inadvertently makes an NSApplication mach port available for inter-process communication instead of inter-t (no CVSS)
- [CVE-2008-0050](https://cve.now/CVE-2008-0050.md): CFNetwork in Apple Mac OS X 10.4.11 allows remote HTTPS proxy servers to spoof secure websites via data in a 502 Bad Gateway error. (no CVSS)
- [CVE-2008-0051](https://cve.now/CVE-2008-0051.md): Integer overflow in CoreFoundation in Apple Mac OS X 10.4.11 might allow local users to execute arbitrary code via crafted time zone data. (no CVSS)
- [CVE-2008-0057](https://cve.now/CVE-2008-0057.md): Multiple integer overflows in a "legacy serialization format" parser in AppKit in Apple Mac OS X 10.4.11 allows remote attackers to execute (no CVSS)
- [CVE-2008-0997](https://cve.now/CVE-2008-0997.md): Stack-based buffer overflow in AppKit in Apple Mac OS X 10.4.11 allows user-assisted remote attackers to cause a denial of service (applicat (no CVSS)
- [CVE-2008-1383](https://cve.now/CVE-2008-1383.md): The docert function in ssl-cert.eclass, when used by src\_compile or src\_install on Gentoo Linux, stores the SSL key in a binpkg, which allow (no CVSS)
- [CVE-2008-1372](https://cve.now/CVE-2008-1372.md): bzlib.c in bzip2 before 1.0.5 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted file that triggers a (no CVSS)
- [CVE-2008-1330](https://cve.now/CVE-2008-1330.md): Unspecified vulnerability in the Windows client API in Novell GroupWise 7 before SP3 and 6.5 before SP6 Update 3 allows remote authenticated (no CVSS)
- [CVE-2008-1369](https://cve.now/CVE-2008-1369.md): A certain incorrect Sun Solaris 10 image on SPARC Enterprise T5120 and T5220 servers has /etc/default/login and /etc/ssh/sshd\_config files t (no CVSS)
- [CVE-2008-1370](https://cve.now/CVE-2008-1370.md): PHP remote file inclusion vulnerability in index.php in wildmary Yap Blog 1.1 allows remote attackers to execute arbitrary PHP code via a UR (no CVSS)
- [CVE-2008-1371](https://cve.now/CVE-2008-1371.md): Absolute path traversal vulnerability in install/index.php in Drake CMS 0.4.11 RC8 allows remote attackers to read and execute arbitrary fil (no CVSS)
- [CVE-2008-0727](https://cve.now/CVE-2008-0727.md): Multiple buffer overflows in oninit.exe in IBM Informix Dynamic Server (IDS) 7.x through 11.x allow (1) remote attackers to execute arbitrar (no CVSS)
- [CVE-2008-0949](https://cve.now/CVE-2008-0949.md): Unspecified vulnerability in IBM Informix Dynamic Server (IDS) 7.x through 11.x allows remote attackers to gain privileges via a malformed c (no CVSS)
- [CVE-2008-1368](https://cve.now/CVE-2008-1368.md): CRLF injection vulnerability in Microsoft Internet Explorer 5 and 6 allows remote attackers to execute arbitrary FTP commands via an ftp:// (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2008-03-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.